Legowin33 Privacy Policy – How We Protect and Manage the Personal Data of Malaysian Members

1Introduction & Scope of the Privacy Policy

legowin33 ("we", "platform") is the data controller responsible for personal data collected through the legowin33.ws website and all related services. We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data management.

This Privacy Policy applies to all personal information collected from you, whether during the registration process, use of the platform, interactions with our customer support team, or through any other means in connection with the services of legowin33.

We are committed to being transparent about how we manage your data. This document is written in plain, easy-to-understand language so that every member legowin33 can clearly understand their rights. Your privacy is not merely a legal obligation to us — it is a core value we have upheld since the very first day legowin33 launched.

2Types of Personal Data We Collect

legowin33 collects your personal data through various means — directly from you, automatically during your use of the platform, and in certain circumstances, from legitimate third-party sources.

3Purpose of Data Collection and Use

legowin33 uses your personal data solely for specific and lawful purposes. We do not process your data for any purpose beyond those stated below without obtaining your additional consent:

• Registration and Account Management: To create and manage your account, verify your identity, and ensure that only the rightful account owner can log in.
• Transaction Processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, and FPX, as well as to process your winnings withdrawals.
• Service Delivery: To allow you to enjoy slots, jackpots, lottery, e-sports, badminton, table games, and Live Casino on our platform.
• Security & Fraud Prevention: To detect and prevent fraudulent activity, money laundering, and security breaches.
• Customer Support: To address enquiries, complaints, and support requests submitted to our CS team legowin33.
• Legal Compliance: To fulfil legal obligations including KYC/AML requirements and directives from competent authorities.
• Platform Improvement: To analyse usage patterns with the aim of improving user experience, platform performance, and game selection.
• Marketing Communications: To send you information about promotions, bonuses, and the latest offers legowin33 — subject to your subscription preferences.

4Legal Basis for Data Processing

legowin33 only processes your personal data where a valid legal basis exists under Malaysia's PDPA. These bases are as follows:

• Consent: You have given explicit consent for specific processing activities, such as receiving marketing communications. You may withdraw this consent at any time.
• Contract Performance: Processing is necessary to perform the services you have requested, including payment processing and game delivery.
• Legitimate Interests: Processing is necessary for legitimate interests legowin33 such as fraud prevention and platform security, provided these interests do not override your fundamental rights.
• Legal Obligations: Processing is necessary to comply with applicable Malaysian laws, including AML and KYC requirements.

5Data Sharing and Disclosure

legowin33 does not sell, rent, or trade your personal data to third parties for marketing purposes under any circumstances. However, we may share your data with certain parties in limited and lawful situations:

• Payment Providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and banks offering FPX (Maybank2u, CIMB Clicks, and others) to process your financial transactions.
• Game Providers: Game software providers such as PG Soft, Pragmatic Play, Playtech, and others, strictly for the technical purpose of delivering games.
• Technical Service Providers: Companies providing cloud computing, email delivery, and analytics services necessary for platform operations.
• Competent Authorities: Malaysian regulatory authorities, the police, or courts when required by law or court order.

All third parties who receive your data are required to comply with data protection standards equivalent to or higher than those of legowin33. We enter into data processing agreements with all our service providers to ensure your data remains protected at all times.

6Data Security Measures

legowin33 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or accidental disclosure.

• Data Encryption in Transit: All data transmitted between your device and our servers is protected by TLS 1.3 protocol and 256-bit SSL encryption.
• Data Encryption at Rest: Sensitive data such as financial information is stored in encrypted format using AES-256 standards.
• Strict Access Controls: Only authorised personnel who require access to carry out their duties may access member data, in accordance with the principle of "least privilege".
• Continuous Monitoring: Our systems are monitored around the clock by our cybersecurity team to detect any unauthorised access attempts or anomalies.
• Two-Factor Authentication (2FA): Available to all member accounts and mandatory for staff accounts accessing internal systems.
• Regular Penetration Testing: We conduct regular security assessments by independent third parties to identify and address system vulnerabilities.

7Data Retention Period

legowin33 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required under Malaysian law.

• Active Account Data: Retained for as long as your account is active and for 7 years following account closure, for audit and legal compliance purposes.
• Financial Transaction Records: Retained for 7 years from the transaction date in accordance with Malaysian financial regulatory requirements.
• Activity & Security Logs: Retained for 2 years for security and investigation purposes.
• Support Communication Records: Retained for 3 years after the support ticket is closed.
• Marketing Data: Retained until you withdraw your consent, or for 3 years following your last interaction.

Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be linked back to you personally.

8Your Rights as a Data Subject

As a member legowin33 and data subjects under Malaysia's PDPA, you have the following rights regarding your personal data:

To exercise any of these rights, please submit your request to privacy@legowin33.ws or via our live chat. We will respond within 14 working days. For complex cases, we may require up to 30 days and will notify you within the first 14 days.

9Cookies, Analytics & Tracking Technologies

legowin33 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform operates smoothly.

• Essential Cookies: Required for core platform functions such as login, gaming sessions, and security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Saving your preferences such as language selection and account display settings for a smoother experience.
• Analytics Cookies: Used to understand how users interact with the platform for improvement purposes. Analytics data is anonymised and aggregated.
• Game Session Cookies: Storing the current game session status to ensure continuity of your gameplay.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the platform. legowin33. For more information about the cookies we use, please contact our support team.

10Protection of Minors' Data

legowin33 is an entertainment platform exclusively for users aged 21 years of age and above. We do not knowingly collect personal data from individuals under the age of 21.

If we discover that we have inadvertently collected personal data from anyone under the age of 21, we will take immediate steps to delete that data and close the account in question. If you believe that a child or underage individual has provided their personal data to us, please contact us immediately at privacy@legowin33.ws.

11Privacy Policy Amendments and Updates

legowin33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other legitimate reasons.

When we make material changes, we will notify you via:

• A prominent notice on the platform's homepage legowin33
• Email to the address registered to your account
• Pop-up notice upon next login

The "Updated" date at the top of this page indicates when the latest revision takes effect. Your continued use of the platform after an amendment notice has been given will be considered as your acceptance of the updated Privacy Policy.

12How to Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or how legowin33 manages your personal data, please reach out to us through any of the following channels:

• Privacy Email: privacy@legowin33.ws (dedicated to privacy enquiries)
• Support Email: support@legowin33.ws
• Live Chat: Available 24/7 on the legowin33 platform in Bahasa Malaysia
• WhatsApp: Reach our CS team via WhatsApp Support

We are committed to handling all privacy enquiries with seriousness and professionalism. Our typical response time is under 24 hours for general enquiries and up to 14 business days for formal data rights requests.